Last updated August 8, 2026
—
For anything concerning your data, write to —.
Name, email address, password (stored as a hash, never in clear text), preferred language. If you sign in with Google we receive your Google identifier and email.
These let you into the service, on the basis of the contract between us. We keep them until you delete your account.
The IP address and browser of your sessions, request counters that prevent abuse, and a record of significant acts — publishing, plan changes, role changes, deletions — with your identifier and IP address.
We process these to keep the service secure, which is in our legitimate interest and yours. Sessions last until they expire; the record of significant acts is kept for two years.
Brand DNA, workspace memory, conversations with the assistant, prompts, uploaded or generated images and video, posts and their scheduling.
This content is yours to decide. If you upload a photograph of a real person as a reference, or write someone's name into a text, you are processing that person's data: it is for you to have the right to do so. The service does not judge what you upload.
We process it to provide the service and keep it until you delete the workspace.
When you connect a social account we receive its authorization tokens and public profile data, and — where available — the metrics of published posts. They let us publish on your behalf and show you the results. They stay until you disconnect the account.
Payment is handled by Stripe: your card details never pass through our systems and we do not store them. We keep the amount, the date and the transaction reference, because tax law requires us to hold them for ten years — including after you delete your account, but stripped of anything identifying you.
If you turn them on we store your browser's push service address, which identifies a device. You can withdraw consent by turning them off.
We use technical cookies only: the one that keeps you signed in and the one that remembers your language. We use no profiling or third-party analytics cookies, so we ask you for no consent: without these two the service would not work.
The service relies on providers that process data on our behalf under contract: AI model providers, a website analysis provider, a social publishing provider, Stripe for payments, an email provider and hosting.
The current list, with where each is based, is on the Providers page. Some are based outside the European Union.
You can ask to access your data, correct it, erase it, restrict its processing, object to processing based on legitimate interest, and receive it in a machine-readable format.
Two of these are already in the product, with no need to write to us:
If you own a workspace with other members you must transfer ownership first: we do not delete other people's work on one person's request.
For the other rights, write to —. You may also lodge a complaint with your data protection authority.